Amendments to the Claims 

1 . (currently amended) A process for modifying an application computer program JhaLilT 
said appli c ation computer program configured in its unmodified form to execute within a first 
electronic execution environment, said process comprising: 

inco rporating i nto said appl ication com puter program an execu tion controller that is 
configured to execute as a debugger wit hin a second electronic execution environment different 
from said first electronic execution environment: 

identifying boundaries of a subsection of said application computer program; and 

modifying said subsection of said application computer program to a form which, when 
executed within the first electronic execution environment, causes a tr ansfer of execution control 
to said execution controller, triggers an invocation of a second electronic execution environment 
different from said computer operating systemfirst execution environment; and 

incorporating with said application computer program control information enabling 
execution of the application computer program in the second execution environment. 

2. (original) The process of claim 1 wherein a boundary of said subsection is a flow control 
instruction. 

3. (cancelled) The process of claim 1 wherein the first execution environment is a computer 
operating system and the second execution environment is a debugging environment. 

4. (currently amended) The process of claim UM1 wherein said step of modifying said 
subsection of said application computer program includes a step of adding an instruction that 
causes s a id operat i ng system t o ajransfer pXexecution control to said execution controller.-said 
deb u g gi ng environment . 

5. (currently amended) The process of claim 1 wherein said step of modifying said 
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subsection of said application computer program includes a step of encrypting at least a portion 
of said subsection of said application computer program-file. 

6. (original) The process of claim 5 wherein said step of modifying said subsection of said 
application computer program further includes a step of relocating at least a portion of said 
encrypted portion of said subsection to a location distinct from the location of the corresponding 
unmodified subsection of said application computer program. 

7. (currently amended) The process of claim 1 wherein said step of modifying said 
subsection of said application computer program includes a step of adding functionality for the 
awl i oat ion com puter program execution controller to communicate with a remote process., 
wherein the remote process does not execute within either the first or second execution 
environments. 

8. (original) The process of claim 7 wherein said remote process is a process that authorizes 
continued execution of the application computer program. 

9. (original) The process of claim 8 wherein said remote process is a cryptographic key 
management process. 

10. (currently amended) The process of claim 7 wherein said application computer 
p rog r a m execution controller communicates information about execution of said applicatio n 
computer application program. 

1 1 . (currently amended) The process of claim 10 wherein said information is information 
about tampering with said application computer application p rogram. 

12. (currently amended) An apparatus for executing an application computer program, 
comprised of: 

a computer with an operating system; 
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an application computer program having a 
executed in a first execution environment under the control of the operating system and a non- 
executable portion in a non-executable form; and 

an execution controller in a form that can be executed as a debu gger in a second 
pfevidffig-as-execution environment under the control of the operati ng syste m, said second 
execution enviromnent distinct from said operating svstem first execution environment, and 
wherein said execution controller being operable to converts the non-executable portion of the 
application computer program into a form that can be execute d in the first execution 
environment . 

1 3 . (currently amended) The apparatus of claim 174^ 11 12 wherein the non-executable portion 
of the application computer program includes an encrypted portion. 

14. (currently amended) The apparatus of claim 13 wherein the execution controller 
appMe^riien-conipute r p r ogram includes a portion communicates with a first remote process , and 
wherein the first remote process does not execute within the first exec ution en vironment or the 
second execution environment, within either the operating system or the execution controller. 

15. (currently amended) The apparatus of claim 14 wherein the first remote process is a 
process that authorizes continued execution of the application computer program. 

16. (currently amended) The apparatus of claim 15 wherein the first remote process is a 
cryptographic key management process. 

1 7. (currently amended) The apparatus of claim ££44Ji 12 wherein the execution controller 
communicates application computer program includes a portion capabl e of communicating to the 
r emote process information about execution of said application computer application pro gram 

a second remote process, wherein the second remote process does not execute wi thin the first 
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execution environment or the second execution environment. . 

18. (currently amended) The apparatus of claim 1 7 wherein the information about execution 
of said application computer application p rogram is information about tampering with the 
application computer application p rogram. 

1 9. (currently amended) A process for executing an application ITa Jlcomputer application 
program, comprising the steps of: 

launching an operating system; 

launching an application computer program, said application computer program having 
an executable portion in a fo rm that can be ex ecuted in a first execution environment under the 
control of the operating system and a non-executable portion in a non-executable form; 

launching an execution controller, said execution controller in a form that can be 
executed as a debugg er in a second providing an execution environment distinct from the 



portion of the application computer program to an executable form capable of execution ; and 

executing the application computer program within the first execution environment-ef-tfee 
execution contro H e r. 

20. (cancelled) The process of claim 19, w her ein the execution controller launches as a 

21. (currently amended) The process of claim 19, wherein the non-executable portion of the 
application computer application program is in encrypted form. 

22. (currently amended) The process of claim 19, wherein the application computer 
pro gram execution controller communicates with a first remote process , wherein the first remote 
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using the execution controller to convert and capable of ■ 



ing-the non-executable 



I not execute under the control of either the operating system application computer 
program or the execution controller. 

23. (currently amended) The process of claim 22 wherein the first r emote process is part of a 
cryptographic key management process. 

24. (currently amended) The process of claim 19 wherein the appl ieation -computer 
program execution controller communicates information to the remote process about execution of 
the application computer program to a second remote process, wherein the second remote 
process does not execute within the first execution environment or the second execution 
environment. 

25. (original) The process of claim 24 wherein the information is information about 
tampering with the application computer program. 
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